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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 



1. (Cancelled) 

2. (Currently Amended) Th e apparatus of Claim 1, wh e r e in: An apparatus for use in one 
of: secret communications by encryption and decryption; digital signature generation and 
verification; and data conversion including encoding and decoding of data, the apparatus 
comprising a machine readable memory that provides instructions for solving a system of 
linear equations Ax=b in n unknowns on a finite field GF(p), where p is a prime, n is a 
positive integer, A is a coefficient matrix consisting of elements of n rows and n columns, 
x is a vector of unknowns consisting of n elements, and b is a constant vector consisting 
of n elements, which when executed by a machine, cause said machine to perform 
operations comprising: 

reading a stored coefficient matrix A and a stored constant vector 6, and triangular 

transforming the read coefficient matrix A and constant vector b to generate a 
coefficient matrix C and a constant vector d for a system of linear equations Cx=d 
in n unknowns that is equivalent to the system of linear equations Ax-b, the 
coefficient matrix C consisting of elements of n rows and n columns and the 
constant vector d consisting of n elements; 

calculating inverses of diagonal elements of the generated coefficient matrix C on the 
finite field GF(p) : and 

solving the system of linear equations Cx-d using the generated coefficient matrix C, the 
generated constant vector J, and the calculated inverses of the diagonal elements 
of the generated coefficient matrix C to thereby solve the system of linear 
equations Ax=b of the read coefficient matrix A and the read constant vector b\ 
and 
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performing one of: secret communication by encryption and decryption; digital signature 
generation and verification; and data conversion including encoding and decoding 
of data, by using the solution of the system of linear equations Ax=b\ wherein 

the coefficient matrix A is triangular transformed into the coefficient matrix C of upp er 
triangular form without a division on the finite field GF(p) being performed; 

generating the coefficient matrix C and the constant vector d of the system of linear 
equations Cx=d from the coefficient matrix A and the constant vector b of the 
system of linear equations Ax=b includes one or more successive transformation 
processes; 

the system of linear equations Ax=b is subjected to the first transformation process and 
the system of linear equations Cx=d is generated as a result of the last 
transformation process; 

in each transformation process, a coefficient matrix and a constant vector of a system of 
linear equations in n unknowns are transformed into a coefficient matrix and, a 
constant vector of a system of linear equations in n unknowns that is equivalent to 
the system of linear equations before the transformation; 

in each transformation process, one pivotal equation which is a linear equation in n 
unknowns serving as a pivot for the transformation and one or more object 
equations which are linear equations in n unknowns to be transformed are chosen 
from the system of linear equations in n unknowns that is subjected to the 
transformation; 

each transformation process has a same number of transformation subprocesses as the 
one or more object equations, each for transforming a separate one of the one or 
more object equations into an equation equivalent to the object equation; and 

in each transformation subprocess, 

(a) each of the coefficients and a constant in the pivotal equation is multiplied by 
a nonzero coefficient chosen from the object equation, and values 
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generated as a result of the multiplications are set into a second coefficient 
group, 

(b) each of coefficients and a constant in the object equation is multiplied by a 

nonzero coefficient chosen from the pivotal equation, and values 
generated as a result of the multiplications are set into a first coefficient 
group, and 

(c) the values in the second coefficient group are subtracted respectively from the 

values in the first coefficient group, and differences generated as a result 
of the subtractions are respectively set as coefficients and a constant in the 
equation equivalent to the object equation. 



3. (Cancelled) 

4. (Previously Presented) The apparatus of Claim 2, wherein 

when the diagonal elements of the coefficient matrix C are denoted by mj (7=7,2, ...,n) 



and the inverses of the diagonal elements m\ (i-1,2, ...,n) in the finite field GF(p) 
are denoted by (7=7,2,. . . ,n) y calculating inverses of diagonal elements of the 
coefficient matrix C includes 

(a) computing values t and u where 



n 



t i = Y\ m k (except mi) m od p (i—1,2,. . . ,n) 



and 



n 




k=\ 



(b) 



computing u where 



u=l/t mod p 



and 



(c) 



computing values /, where 
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Ij=uxti mod p (i=l,2,...,n) 

to find the inverses 7, (i-l,2 9 ...,n). 

5. (Previously Presented) The apparatus of Claim 4 5 

wherein computing the values t and U includes calculating 
Sj =1711X1712 mod p 
S2=s/xm3 mod p 

s n .3=s n - 4 xm n -2 modp 
in the stated order, then calculating 
t n =s n -3xm n . } modp 
t„-j-s n .3xm n mod p 
s n =m n ./xm n mod p 

tn-2 = Sn-4><Sn mod p 

s n -i = m n -2xs n mod p 
t n -3=s n - 5 xs n -i modp 

Sn-2=mn-3 x Sn-I mod p 

t n . 4 =s n . 6 xs n . 2 mod p 
\ 

Ss-m 4 xs 6 modp 
t3=S}XSs modp 
S4=m3xss modp 
t2=mjxs 4 modp 
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t/=m2*S4 mod p 
in the stated* order, and lastly calculating 
t=tjxnij 

for a value j chosen from a set of positive integers {l,2,...,n}. 

6. (Currently Amended) Th e apparatus of Claim 1 wher e in: An apparatus for use in one of: 
secret communications by encryption and decryption; digital signature generation and 
verification; and data conversion including encoding and decoding of data, the apparatus 
comprising a machine readable memory that provides instructions for solving a system of 
linear equations Ax-b in n unknowns on a finite field GF(p)^ where p is a prime, n is a 
positive integer, A is a coefficient matrix consisting of elements of n rows and n columns, 
x is a vector of unknowns consisting of n elements, and b is a constant vector consisting 
of n elements, which when executed by a machine, cause said machine to perform 
operations comprising: 

reading a stored coefficient matrix A and a stored constant vector b s and triangular 

transforming the read coefficient matrix A and constant vector b to generate a 
coefficient matrix C and a constant vector d for a system of linear equations Cx=d 
in n unknowns that is equivalent to the system of linear equations Ax=b* the 
coefficient matrix C consisting of elements of n rows and n columns and the 
constant vector d consisting of n elements; 

calculating inverses of diagonal elements of the generated coefficient matrix C on the 
finite field GF(p)\ and 

solving the system of linear equations Cx=d using the generated coefficient matrix C, the 
generated constant vector <i, and the calculated inverses of the diagonal elements 
of the generated coefficient matrix C, to thereby solve the system of linear 
equations Ax=b of the read coefficient matrix A and the read constant vector b\ 
and 
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performing one of: secret communication by encryption and decryption; digital signature 
generation and verification; and data conversion including encoding and decoding 
of data, by using the solution of the system of linear equations Ax=b: wherein 

the coefficient matrix A is triangular transformed into the coefficient matrix C of upper 
triangular form without a division on the finite field GFfp) being performed; 

generating the coefficient matrix C and the constant vector d of the system of linear 
equations Cx=d from the coefficient matrix A and the constant vector b of the 
system of linear equations Ax=b includes one or more successive transformation 
processes; 

the system of linear equations Ax=b is subjected to the first transformation process and 
the system of linear equations Cx=d is generated as a result of the last 
transformation process; 

in each transformation process, a coefficient matrix and a constant vector of a system of 
linear equations in n unknowns are transformed into a coefficient matrix and a 
constant vector of a system of linear equations in n unknowns that is equivalent to 
the system of linear equations before the transformation; 

in each transformation process, one pivotal equation which is a linear equation in n 
unknowns serving as a pivot for the transformation and one or more object 
equations which are linear equations in n unknowns to be transformed are chosen 
from the system of linear equations in n unknowns that is subjected to the 
transformation; 

each transformation process has a coefficient group calculation process and a same 

number of transformation subprocesses as the one or more object equations, the 
transformation subprocesses being performed following the coefficient group 
calculation process and being each for transforming a separate one of the one or 
more obj ect equations ; 

in the coefficient group calculation process, 
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(a) a nonzero coefficient is chosen from each of the pivotal equation and the one 

or more object equations, a product is calculated for each of the pivotal 
equation and the one or more object equations by multiplying together all 
chosen nonzero coefficients except a nonzero coefficient chosen from the 
equation, and products calculated respectively for the pivotal equation and 
the one or more object equations are set into a first coefficient group, and 

(b) each of coefficients and a constant in the pivotal equation except a nonzero 

coefficient chosen from the pivotal equation in the coefficient group 
calculation process is multiplied by a product in the first coefficient group 
calculated for the pivotal equation, and values generated as a result of the 
multiplications are set into a second coefficient group; and 

in each transformation subprocess for transforming a separate one of the one or more 
object equations, 

(a) a nonzero coefficient chosen from the object equation in the coefficient group 

calculation process is changed to 0 as a new coefficient, 

(b) each of coefficients in the object equation except the nonzero coefficient 

chosen from the object equation is multiplied by a product in the first 
coefficient group calculated for the object equations, values in the second 
coefficient group calculated from the coefficients in the pivotal equation 
are subtracted respectively from values generated as a result of the 
multiplications on the coefficients in the object equation to generate 
differences, and the coefficients in the object equation are changed 
respectively to the differences as new coefficients, and 

(c) a constant in the object equation is multiplied by the product calculated for the 

object equations, a value in the second coefficient group calculated from 
the constant in the pivotal equation is subtracted from a value generated as 
a result of the multiplication on the constant in the object equation to 
generate a difference, and the constant in the object equation is changed to 
the difference as a new constant. 
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7. (Previously Presented) The apparatus of Claim 2, 

wherein when the diagonal elements of the coefficient matrix C are denoted by mj 

(i=l,2, ...,n) and the inverses of the diagonal elements m x (i=l,2,...,n) in the finite 
field GF(p) are denoted by Ii (7=7,2, ...,n) , calculating inverses of diagonal 
elements of the coefficient matrix C includes 

(a) a multiplying unit for computing values t and where 

n 

t ( = Y\ m k (except mi) m od p (1=1,2,, . . ,n) 

and 

n 

t =\\m k modp 

(b) computing a value u where 
u=\lt mod p 

and 

(c) computing values 7} where 
If=uxti mod p (i=l ,2, . . . ,n) 

to find the inverses 7, (i=l,2, ...,n). 

8. (Previously Presented) The apparatus of Claim 7, 
wherein computing values t and t t includes calculating 

Sj=mjxni2 modp 
S2=S}xms modp 
\ 

s n -3=s n -4xm n - 2 modp 
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in the stated order, then calculating 

t n =s n -3xm n .j modp 
t n .i~s n .sxm n mod p 
s n ~m n .ixm n mod p 
t n -2=s n .4xs n mod p 
s n .i=m n .2xs n modp 

tn-3=Sn-5><Sn-l mod p 

s n -2=m n - 3 xs n -i modp 

t n - 4 =s n . 6 xs n -2 modp 
| 

S5=m4xs<$ mod p 
t3-S}XSsmodp 
S4—msxs5 mod p 
t2~m\xs4 mod p 
ti~m2xs 4 modp 
in the stated order, and lastly calculating 
t-tjxmj 

for a value j chosen from a set of positive integers {1,2, ...,n}. 

9. (Currently Amended) An apparatus for computing an inverse / of an element y in GF(q) 
which is an extension field of a finite field GF(p), where p is a prime, q=p n , and n is a 
positive integer, the apparatus comprising: 
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equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax-b in n unknowns, using the element y and all 
coefficients of a generator polynomial of GF(q) whose root is <r, 

equation solving means for finding solutions Xk (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b , th e e quation solving m e ans including the apparatus of claim 1 ; 
and 

inverse computing means for computing the inverse /, 7=X0+;t/a+... +x n ./a n ~ i , using the 
root a and the solutions Xk (k=0, 1,2, n-1) found by the equation solving 
means ; wherein 

the equation solving means includes a machine readable memory that provides 
instructions for solving the system of linear equations Ax=b where A is a 
coefficient matrix consisting of elements of n rows and n columns, x is a vector of 
unknowns consisting of n elements, and b is a constant vector consisting of n 
elements, which when executed by a machine, cause said machine to perform 
operations comprising 

reading a stored coefficient matrix A and a stored constant vector b, 

triangular transforming the read coefficient matrix A and constant vector b to 
generate a coefficient matrix C and a constant vector d for a system of 
linear equations Cx=d in n unknowns that is equivalent to the system of 
linear equations Ax=b* the coefficient matrix C consisting of elements of n 
rows and n columns and the constant vector d consisting of n elements, 
wherein the coefficient matrix A is triangular transformed into the 
coefficient matrix C of upper triangular form without a division on the 
finite field GF(p) being performed, 

calculating inverses of diagonal elements of the generated coefficient matrix C on 
the finite field GF(p), and 

solving the system of linear equations Cx=d using the generated coefficient 

matrix C, the generated constant vector d. and the calculated inverses of 
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the diagonal elements of the generated coefficient matrix C to thereby 
solve the system of linear equations Ax=b of the read coefficient matrix A 
and the read constant vector b . 

10. (Currently Amended) An apparatus for us e in on e of: s e cr e t communications by 
e ncryption and d e cryption; digital signatur e g e n e ration and v e rification; and data 
conv e rsion including e ncoding and d e coding of data. The apparatus of claim 2, the 
apparatus computing an inverse I of an element^ in GF(q) which is an extension field of 
a finite field GF(p), where p is a prim e , q=p n , and n is a positive int e ger , the apparatus 
further comprising: 

equation generating means for generating [[a]] the coefficient matrix A and [[a]] the 

constant vector b for a syst e m of lin e ar e quations Ax~b in n unknowns, using the 
element^ and all coefficients of a generator polynomial of GF(q) whose root is or, 

equation solving means for finding solutions (k=0, 1,2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the apparatus of Claim 2 
the machine readable memory ; and 

inverse computing means for computing the inverse /, I=x 0 +xja+... +x n .ia n ~ J , using the 
root a and the solutions x k (k=0, 1,2, n-1) found by the equation solving 
means; and 

means for performing one of: secret communication by encryption and decryption; digital 
signature generation and verification; and data conversion including encoding and 
decoding of data, by using the computed inverse /. 

11. (Cancelled) 

12. (Currently Amended) An apparatus for us e in on e of: s e cret communications by 
e ncryption and d e cryption; digital signatur e g e neration and v e rification; and data 
conv e rsion including encoding and d e coding of data. The apparatus of claim 4, the 
apparatus computing an inverse / of an element^ in GF(q) which is an extension field of 
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a finite field GF(p), where p is a prim e , q=p n , and n is a positiv e int e ger , the apparatus 
further comprising: 

equation generating means for generating [[a]] the coefficient matrix A and [[a]] the 

constant vector b for a system of linear equations Ax~b in n unknowns, using the 
element^ and all coefficients of a generator polynomial of GF(q) whose root is or, 

equation solving means for finding solutions jt* (k=0, 7, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the -machine readable 
memory; apparatus of Claim 4 ; 

and 

inverse computing means for computing the inverse /, I=x 0 +xia+... +x n .ja ' , using the 
root a and the solutions (k=0, 1, 2, n-1) found by the equation solving 
means; and 

means for performing one of: secret communication by encryption and decryption; digital 
signature generation and verification; and data conversion including encoding and 
decoding of data, by using the computed inverse /. 



13. (Currently Amended) An apparatus for use in one of: secret communications by 
e ncryption and d e cryption; digital signatur e g e n e ration and v e rification; and data 
conv e rsion including e ncoding and d e coding of data, The apparatus of claim 5, - the 
apparatus computing an inverse / of an element^ in GF(q) which is an extension field of 
a finite field GF(p), where p is a prim e , q=p n , and n is a positiv e integ e r , the apparatus 
further comprising: 

equation generating means for generating [[a]] the coefficient matrix A and [[a]] the 

constant vector b for a syst e m of lin e ar e quations iix~b in n unknowns, using the 
element^ and all coefficients of a generator polynomial ofGF(q) whose root is or 9 

equation solving means for finding solutions** (k=0, 1, 2, n-1) of the system of linear 
equations Ax~b, the equation solving means including the machine readable 
memory; apparatus of Claim 5; 



62478.3400\ZOETEWD\IRV\424689. 1 B 



13 



Appl. No. 09/603,636 Docket No. NAK1-BL53 (62478-1300) 

Amdt. dated June 2, 2005 

Reply to Office Action of January 5, 2005 

inverse computing means for computing the inverse /, I=xo+xja+... +x n „ia n ~ ! , using the 
root or and the solutions Xk (k=0, 1, 2, n-1) found by the equation solving 
means; and 

means for performing one of: secret communication by encryption and decryption; digital 
signature generation and verification; and data conversion including encoding and 
decoding of data, by using the computed inverse /. 

14. (Currently Amended) An apparatus us e in on e of: s e cr e t communications by e ncryption 
and d e cryption; digital signatur e g e neration and verification; and data conv e rsion 
including e ncoding and d e coding of data, the apparatus for computing The apparatus of 
claim 6, the apparatus computing an inverse / of an element^ in GF(q) which is an 
extension field of a finite field GF(p), where p is a prim e , q=p n , and n is a positiv e 
krteger, the apparatus further comprising: 

equation generating means for generating [[a]] the coefficient matrix A and [[a]] the 

constant vector b for a syst e m of lin e ar e quations Ax~b in n unknowns, using the 
element^ and all coefficients of a generator polynomial oiGF(q) whose root is or, 

equation solving means for finding solutions x k (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the machine readable 
memor y apparatus of Claim 6 ; and 

inverse computing means for computing the inverse I=xo+xja+... +x n ./a ' , using the 
root a and the solutions (k=0, 1,2, n-1) found by the equation solving 
means; and 

means for performing one of: secret communication by encryption and decryption; digital 
signature generationand verification; and data conversion including encoding and 
decoding of data, by using the computed inverse /. 

15. (Currently Amended) An apparatus for us e in one of: s e cr e t communications by 
encryption and d e cryption; digital signatur e g e neration and v e rification; and data 
conversion including e ncoding and d e coding of data. The apparatus of claim 7, the 
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apparatus computing an inverse I of an element;; in GF(q) which is an extension field of 
a finite field GF(p) y where p is a prim e , q=p n and n is a positiv e int e g e r , the apparatus 
comprising: 

equation generating means for generating [[a]] the coefficient matrix A and [[a]] the 

constant vector b for a syst e m of lin e ar e quations Ax~b in n unknowns, using the 
element y and all coefficients of a generator polynomial of GF(q) whose root is <r, 

equation solving means for finding solutions jc* (k=0, 7, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the machine readable 
memory apparatus of Claim 7 ; and 

inverse computing means for computing the inverse /, I=xo+xja+ ... +x /I ./a"" 7 , using the 
root a and the solutions jc* (k=0, 7, 2, n-1) found by the equation solving 
means; and 

means for performing one of: secret communication by encryption and decryption; digital 
signature generation and verification; and data conversion including encoding and 
decoding of data, by using the computed inverse /. 

16. (Currently Amended) An apparatus for us e in one of: s e cr e t communications by 
e ncryption and d e cryption; digital signatur e g e neration and v e rification; and data 
conv e rsion including e ncoding and d e coding of data, The apparatus of claim 8, the 
apparatus computing an inverse / of an element^ in GF(q) which is an extension field of 
a finite field GF(p) y where p is a prim e , q=p n 9 and n is a positive int e ger , the apparatus 
comprising: 

equation generating means for generating [[a]] the coefficient matrix A and [[a]] the 

constant vector b for a syst e m of lin e ar e quations Ax~b in n unknowns, using the 
element;; and all coefficients of a generator polynomial of GF(q) whose root is or, 

equation solving means for finding solutions x k (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the machine readable 
memor y apparatus of Claim 8 ; and 
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inverse computing means for computing the inverse /, I=xo+xia+ ... +x n -ia n ~ l t using the 
root a and the solutions Jt* (k=0, 1,2, .... n-1) found by the equation solving 
means; and 

means for performing one of: secret communication by encryption and decryption; digital 
signature generation and verification; and data conversion including encoding and 
decoding of data, by using the computed inverse /. 

17. (Currently Amended) A record medium reproducing apparatus for computing, when 

copyrighted digital content has been encrypted using a discrete logarithm problem on an 
elliptic curve E over GF(q) as a basis for security and recorded on a record medium, an 
inverse I of an element^ in GF(q) to decrypt the encrypted digital content recorded on 
the record medium, where GF(q) is an extension field of a finite field GF(p),p is a prime, 
q=p n , n is a positive integer, and G is a base point of the elliptic curve £, the record 
medium reproducing apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element y and all 
coefficients of a generator polynomial of GF(q) whose root is a; 

equation solving means for finding solutions** (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including th e apparatus of claim 1 ; 
and 

inverse computing means for computing the inverse /, I=xo+xia+... +x„-/a " , using the 
root a and the solutions x k (k=0, 1, 2, n-1) found by the equation solving 
means; and 

means for using I to decrypt the encrypted digital content recorded on the record medium; 
wherein 

the equation solving means includes a machine readable memory that provides 
instructions for solving the system of linear equations Ax-b where A is a 
coefficient matrix consisting of elements of n rows and n columns, x is a vector of 
unknowns consisting of n elements, and b is a constant vector consisting of n 
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elements, which when executed by a machine, cause said machine to perform 
operations comprising 

reading a stored coefficient matrix A and a stored constant vector b. 

triangular transforming the read coefficient matrix A and constant vector b to 
generate a coefficient matrix C and a constant vector d for a system of 
linear equations Cx=d in n unknowns that is equivalent to the system of 
linear equations Ax=b, the coefficient matrix C consisting of elements of n 
rows and n columns and the constant vector d consisting of n elements, 
wherein the coefficient matrix A is triangular transformed into the 
coefficient matrix C of upper triangular form without a division on the 
finite field GF(p) being performed, 

calculating inverses of diagonal elements of the generated coefficient matrix Con 
the finite field GF(v). and 

solving the system of linear equations Cx=d using the generated coefficient 

matrix C the generated constant vector d* and the calculated inverses of 
the diagonal elements of the generated coefficient matrix C, to thereby 
solve the system of linear equations Ax—b of the read coefficient matrix A 
and the read constant vector b . 

18. (Currently Amended) The apparatus of claim 2 wherein the apparatus is a ("[ All record 
medium reproducing apparatus for computing, when copyrighted digital content has been 
encrypted using a discrete logarithm problem on an elliptic curve E over GF(q) as a basis 
for security and recorded on a record medium, an inverse / of an element^ in GF(q) to 
decrypt the encrypted digital content recorded on the record medium, where GF(q) is an 
extension field of [[a]] the finite field GF(p), p is a prim e , ff =p", n is a positiv e int e g e r, 
and G is a base point of the elliptic curve E, the record medium reproducing apparatus 
further comprising: 
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equation generating means for generating [[a]] the coefficient matrix A and [[a]] the 

constant vector b for a syst e m of lin e ar e quations Ax~b in n unknowns, using the 
element^ and all coefficients of a generator polynomial of GF(q) whose root is or y 

equation solving means for finding solutions Xk (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the- machine readable 
memor y apparatus of Claim 2; and 

inverse computing means for computing the inverse /, I=x 0 +xia+... using the 

root a and the solutions jc* (k=0, 1, 2, n-1) found by the equation solving 
means; and 

means for using / to decrypt the encrypted digital content recorded on the record medium. 

19. (Cancelled) 

20. (Currently Amended) The apparatus of claim 4 wherein the apparatus is a \\A\\ record 
medium reproducing apparatus for computing, when copyrighted digital content has been 
encrypted using a discrete logarithm problem on an elliptic curve E over GF(q) as a basis 
for security and recorded on a record medium, an inverse I of an element^ in GF(q) to 
decrypt the encrypted digital content recorded on the record medium, where GF(q) is an 
extension field of [[a]] the finite field GF(p), p is a prim e , q=p n , n is a positiv e int e ger, 
and G is a base point of the elliptic curve E, the record medium reproducing apparatus 
further comprising: 

equation generating means for generating [[a]] the coefficient matrix A and [[a]] the 

constant vector b for a syst e m of lin e ar e quations Ax~b in n unknowns, using the 
element^ and all coefficients of a generator polynomial of GF(q) whose root is a, 

equation solving means for finding solutions Xk (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the machine readable 
memory apparatus of Claim 4; and 
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inverse computing means for computing the inverse /, I=x 0 +xia+... +x n .ia n ~ 1 , using the 
root a and the solutions x k (k=0, 1, 2, n-1) found by the equation solving 
means; and 

means for using / to decrypt the encrypted digital content recorded on the record medium. 

21. (Currently Amended) The apparatus of claim 5, wherein the apparatus is a record 
medium reproducing apparatus for computing, when copyrighted digital content has been 
encrypted using a discrete logarithm problem on an elliptic curve E over GF(q) as a basis 
for security and recorded on a record medium, an inverse I of an element y in GF(q) to 
decrypt the encrypted digital content recorded on the record medium, where GF(q) is an 
extension field of [[a]]the finite field GF(p), p is a prim e , q-p n 9 n is a positiv e int e g e r, 
and G is a base point of the elliptic curve E 9 the record medium reproducing apparatus 
further comprising: 

equation generating means for generating [[a]] the coefficient matrix A and [[a]] the 

constant vector b for a syst e m of lin e ar e quations Ax~b in n unknowns, using the 
element^ and all coefficients of a generator polynomial of GF(q) whose root is cr, 

equation solving means for finding solutions jc* (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the machine readable 
memory; apparatus of Claim 5; and 

inverse computing means for computing the inverse /, I=xo+xia+... +x„_ya /I " / , using the 
root a and the solutions jc* (k=0, 1, 2, n-1) found by the equation solving 
means; and 

means for using / to decrypt the encrypted digital content recorded on the record medium. 

22. (Currently Amended) The apparatus of claim 6, wherein the apparatus is a |"["A1] record 
medium reproducing apparatus for computing, when copyrighted digital content has been 
encrypted using a discrete logarithm problem on an elliptic curve E over GF(q) as a basis 
for security and recorded on a record medium, an inverse / of an element >> in GF(q) to 
decrypt the encrypted digital content recorded on the record medium, where GF(q) is an 
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extension field of [[a]]the finite field GF(p), pis a prim e , q=p n , n is a positiv e int e g e r, 
and G is a base point of the elliptic curve E, the record medium reproducing apparatus 
further comprising: 

equation generating means for generating [[a]] the coefficient matrix A and [[a]] the 

constant vector b for a syst e m of lin e ar e quations Ax~b in n unknowns, using the 
element^ and all coefficients of a generator polynomial of GF(q) whose root is a\ 

equation solving means for finding solutions ;t* (k=0, 1, 2, n-1) of the system of linear 
equations Ax-b, the equation solving means including the machine readable 
memory; apparatus of Claim 6; and 

inverse computing means for computing the inverse /, I=xo+xja+... +x„_/a"~ / , using the 
root aand the solutions^ (k=0, 1, 2, n-1) found by the equation solving 
means; and 

means for using / to decrypt the encrypted digital content recorded on the record medium. 

23. (Currently Amended) The apparatusof claim 7, wherein the apparatus is a \\A]] record 
medium reproducing apparatus for computing, when copyrighted digital content has been 
encrypted using a discrete logarithm problem on an elliptic curve E over GF(q) as a basis 
for security and recorded on a record medium, an inverse / of an element^ in GF(q) to 
decrypt the encrypted digital content recorded on the record medium, where GF(q) is an 
extension field of [[a]]the finite field GF(p), pis a prim e , q=p n , n is a positiv e int e g e r, 
and G is a base point of the elliptic curve E 9 the record medium reproducing apparatus 
further comprising: 

equation generating means for generating [[a]] the coefficient matrix A and [[a]] the 

constant vector b for a syst e m of lin e ar e quations Ax~b in n unknowns, using the 
element^ and all coefficients of a generator polynomial of GF(q) whose root is or, 

equation solving means for finding solutions jc* (k=0 t 1, 2, n-1) of the system of linear 
equations Ax-b, the equation solving means including the machine readable 
memory: apparatus of Claim 7; and 
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inverse computing means for computing the inverse /, I=xo+xia+ ... +x n .ia n ~ ! f using the 
root Grand the solutions (k=0, 7, 2, n-J) found by the equation solving 
means; and 

means for using I to decrypt the encrypted digital content recorded on the record medium. 

24. (Currently Amended) The apparatus of claim 8, wherein the apparatus is a IT All record 
medium reproducing apparatus for computing, when copyrighted digital content has been 
encrypted using a discrete logarithm problem on an elliptic curve E over GF(q) as a basis 
for security and recorded on a record medium, an inverse / of an element y in GF(q) to 
decrypt the encrypted digital content recorded on the record medium, where GF(q) is an 
extension field of [[a]]the_finite field GF(p), p\Q a prim e , q=p n , n is a positiv e int e g e r, 
and G is a base point of the elliptic curve E, the record medium reproducing apparatus 
comprising: 

equation generating means for generating [[a]] the coefficient matrix A and [[a]] the 

constant vector b for a system of lin e ar e quations Ax~b in n unknowns, using the 
element^ and all coefficients of a generator polynomial of GF(q) whose root is or, 

equation solving means for finding solutions jc* (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the machine readable 
memory; apparatus of Claim 8; and 

inverse computing means for computing the inverse /, I=xo+X}a+ ... +jt„./a' I ~ / , using the 
root a and the solutions jc* (k=0, 7, 2, n-1) found by the equation solving 
means; and 

means for using I to decrypt the encrypted digital content recorded on the record medium. 



25. (Cancelled) 

26. (Currently Amended) Th e m e thod of Claim 25, wh e r e in: A machine based method for 
use in one of: secret communications by encryption and decryption; digital signature 
generation and verification; and data conversion including encoding and decoding of 
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data, the method solving a system of linear equations Ax=b in n unknowns on a finite 
field GF(p) where p is a prime, n is a positive integer, A is a coefficient matrix consisting 
of elements of n rows and n columns, x is a vector of unknowns consisting of n elements, 
and b is a constant vector consisting of n elements, the method comprising: 

utilizing a machine readable memory to provide instructions to a machine for execution 
by the machine, wherein 

the instructions, when executed by the machine, cause the machine to perform operations 
comprising: 

reading a stored coefficient matrix A and a stored constant vector 6, and triangular 

transforming the read coefficient matrix A and constant vector b to generate a 
coefficient matrix C and a constant vector d for a system of linear equations Cx=d 
in n unknowns that is equivalent to the system of linear equations Ax-b, the 
coefficient matrix C consisting of elements of n rows and n columns and the 
constant vector d consisting of n elements; 

calculating inverses of diagonal elements of the generated coefficient matrix C on the 
finite field GF(p)\ and 

solving the system of linear equations Cx=d using the generated coefficient matrix C, the 
generated constant vector <i, and the calculated inverses of the diagonal elements 
of the generated coefficient matrix C, to thereby solve the system of linear 
equations Ax=bi of the read coefficient matrix A and the read constant vector 6, 
and 

performing one of: secret communication by encryption and decryption; digital signature 
generation and verification; and data conversion including encoding and decoding 
of data, by using the solution of the system of linear equations Ax=b: wherein 

the coefficient matrix A is triangular transformed into the coefficient matrix C of upper 
triangular form without a division on the finite field GF(p) being performed; 

generating the coefficient matrix C and the constant vector d of the system of linear 
equations Cx=d from the coefficient matrix A and the constant vector b of the 
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system of linear equations Ax-b includes one or more successive transformation 
processes; 

the system of linear equations Ax=b is subjected to the first transformation process and 
the system of linear equations Cx=d is generated as a result of the last 
transformation process, 

in each transformation process, a coefficient matrix and a constant vector of a system of 
linear equations in n unknowns are transformed into a coefficient matrix and a 
constant vector of a system of linear equations in n unknowns that is equivalent to 
the system of linear equations before the transformationin each transformation 
process, one pivotal equation which is a linear equation in n unknowns serving as 
a pivot for the transformation and one or more object equations which are linear 
equations in n unknowns to be transformed are chosen from the system of linear 
equations in n unknowns that is subjected to the transformation; 

each transformation process has a same number of transformation subprocesses as the 
one or more object equations, each for transforming a separate one of the one or 
more object equations into an equation equivalent to the object equation; and 

in each transformation subprocess, 

(a) each of the coefficients and a constant in the pivotal equation is multiplied by 

a nonzero coefficient chosen from the object equation, and values 
generated as a result of the multiplications are set into a second coefficient 
group, 

(b) each of coefficients and a constant in the object equation is multiplied by a 

nonzero coefficient chosen from the pivotal equation, and values 
generated as a result of the multiplications are set into a first coefficient 
group, and 

(c) the values in the second coefficient group are subtracted respectively from the 

values in the first coefficient group, and differences generated as a result 
of the subtractions are respectively set as coefficients and a constant in the 
equation equivalent to the object equation. 
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27. (Cancelled) 

28. (Previously Presented) The method of Claim 26, wherein 

when the diagonal elements of the coefficient matrix C are denoted by mi (i-l f 2 f ...,n) 

and the inverses of the diagonal elements mi (i=l,2, ...,n) in the finite field GF(p) 
are denoted by // (7=7,2,. . . ,n), calculating the inverses of the diagonal elements 
of the coefficient matrix C includes 

(a) computing values t and U where 

n 

t { = Y\ m * ( exce Pt m i) m °d P (i = l>2>> * • ,«J 
*=i 

and 

n 
k=l 

(b) computing value u where 
u=l/t modp 

and 

(c) computing values /, where 
Ii=uxti mod p (i=l,2, ...,n) 

to find the inverses // (i=l,2, ...,n). 

29. (Previously Presented) The method of Claim 28, 

wherein the computing the values t and tj includes calculating 
S/=m/xm 2 mod p 
S2~S}xm^ mod p 

Sn-3=s n . 4 xm n .2 mod p 
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in the stated order, then calculating 

t n =s n . 3 xmn-i modp 
t n .j=s n . 3 xm n modp 
s n =m n _ } xm n mod p 
t n .2=s n -4 x s n mod p 
s n -i=m n .2xs n mod p 

tn-3=Sn-5><Sn-l mod p 

s n . 2 =m n -3xs n .i modp 
t n -4=s n - 6 xs n - 2 mod p 

S5=m 4 xs6 modp 
t3=SjXs 5 mod p 
S4=msxss mod p 
t2~m\xs4 mod p 
t}=m2XS4 mod p 
in the stated order, and lastly calculating 
t=tjXnij 

for a value j chosen from a set of positive integers {1,2, / 

30. (Currently Amended) Th e m e thod of Claim 25, wher e i n A machine based method for 
use in one of: secret communications by encryption and decryption; digital signature 
generation and verification; and data conversion including encoding and decoding of 
data, the method solving a system of linear equations Ax=b in n unknowns on a finite 
field GF(p) where p is a prime, n is a positive integer, A is a coefficient matrix consisting 
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of elements of n rows and n columns, jc is a vector of unknowns consisting of n elements, 
and b is a constant vector consisting of n elements, the method comprising: 

utilizing a machine readable memory to provide instructions to a machine for execution 
by the machine, wherein 

the instructions, when executed by the machine, cause the machine to perform operations 
comprising: 

reading a stored coefficient matrix A and a stored constant vector b. and triangular 

transforming the read coefficient matrix A and constant vector b to generate a 
coefficient matrix C and a constant vector d for a system of linear equations Cx-d 
in n unknowns that is equivalent to the system of linear equations Ax-b, the 
coefficient matrix C consisting of elements of n rows and n columns and the 
constant vector d consisting of n elements; 

calculating inverses of diagonal elements of the generated coefficient matrix C on the 
finite field GF(p): and 

solving the system of linear equations Cx=d using the generated coefficient matrix C, the 
generated constant vector d, and the calculated inverses of the diagonal elements 
of the generated coefficient matrix C, to thereby solve the system of linear 
equations Ax-bi of the read coefficient matrix A and the read constant vector 6, 
and 

performing one of: secret communication by encryption and decryption; digital signature 
generation and verification; and data conversion including encoding and decoding 
of data, by using the solution of the system of linear equations Ax=b\ wherein 

the coefficient matrix A is triangular transformed into the coefficient matrix C of upp er 
triangular form without a division on the finite field GF(p) being performed; 

generating the coefficient matrix C and the constant vector d of the system of linear 
equations Cx=d from the coefficient matrix A and the constant vector b of the 
system of linear equations Ax=b includes one or more successive transformation 
processes; 
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the system of linear equations Ax^b is subjected to the first transformation process and 
the system of linear equations Cx=d is generated as a result of the last 
transformation process; 

in each transformation process, a coefficient matrix and a constant vector of a system of 
linear equations in n unknowns are transformed into a coefficient matrix and a 
constant vector of a system of linear equations in n unknowns that is equivalent to 
the system of linear equations before the transformation; 

in each transformation process, one pivotal equation which is a linear equation in n 
unknowns serving as a pivot for the transformation and one or more object 
equations which are linear equations in n unknowns to be transformed are chosen 
from the system of linear equations in n unknowns that is subjected to the 
transformation; 

each transformation process has a coefficient group calculation process and a same 

number of transformation subprocesses as the one or more object equations, the 
transformation subprocesses being performed following the coefficient group 
calculation process and being each for transforming a separate one of the one or 
more object equations; 

in the coefficient group calculation process, 

(a) a nonzero coefficient is chosen from each of the pivotal equation and the one 

or more object equations, a product is calculated for each of the pivotal 
equation and the one or more object equations by multiplying together all 
chosen nonzero coefficients except a nonzero coefficient chosen from the 
equation, and products calculated respectively for the pivotal equation and 
the one or more object equations are set into a first coefficient group, and 

(b) each of coefficients and a constant in the pivotal equation except a nonzero 

coefficient chosen from the pivotal equation in the coefficient group 
calculation process is multiplied by a product in the first coefficient group 
calculated for the pivotal equations, and values generated as a result of the 
multiplications are set into a second coefficient group; and 
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in each transformation subprocess for transforming a separate one of the one or more 
object equations, 

(a) a nonzero coefficient chosen from the object equation in the coefficient group 

calculation process is changed to 0 as a new coefficient, 

(b) each of coefficients in the object equation except the nonzero coefficient 

chosen from the object equation is multiplied by a product in the first 
coefficient group calculated for the object equations, values in the second 
coefficient group calculated from the coefficients in the pivotal equations 
are subtracted respectively from values generated as a result of the 
multiplications on the coefficients in the object equation to generate 
differences, and the coefficients in the object equation are changed 
respectively to the differences as new coefficients, and 

(c) a constant in the object equation is multiplied by the product calculated for the 

object equations, a value in the second coefficient group calculated from 
the constant in the pivotal equation is subtracted from a value generated as 
a result of the multiplication on the constant in the object equation to 
generate a difference, and the constant in the object equation is changed to 
the difference as a new constant. 

3 1 . (Previously Presented) The method of Claim 26, wherein 

when the diagonal elements of the coefficient matrix C are denoted by mi (i=l,2 f ...,n) 

and the inverses of the diagonal elements mi (i=l,2,...,n) in the finite field GF(p) 
are denoted by// (z=/,2,. . . ,n), calculating the inverses of the diagonal elements 
of the coefficient matrix C includes 

(a) computing values t and t t where 

n 

t i ~Y\ m k (except Wj) mod p (i=l f 2 t . . . ,n) 

k=\ 

and 
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n 

t =Y\ m k m °dp 

k=\ 

(b) computing a value u where 
u-l/t mod p 

and 

(c) computing values /, where 
li-uxti mod p (i=l,2,...,n) 

to find the inverses /, (i=l,2,...,n). 

32. (Previously Presented) The method of Claim 3 1 , 

wherein computing values t and ^involves calculating 
Si-mjxm2 modp 
S2~sjxm3 mod p 
\ 

S n -S = S n -4Xm n .2 ™od p 

in the stated order, then calculating 
t n —s n .sxm n .i modp 
t n -i =s n -3xm n mod p 
s n =m n ./xm n modp 

t n -2=Sn- 4 XSn mod p 

s n -}=m n -2><Sn mod p 
t n -3=s n - 5 xs n ./ modp 
s n -2=m n - 3 xs n -i mod p 

t n -4=Sn-6XS n . 2 mod p 
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I 

S5=m 4 xs6 mod p 
t3=s/xss modp 
S4=msxss mod p 
t2-m\xs4 mod p 
ti~m2><S4 mod p 
in the stated order, and lastly calculating 
t=tjxmj 

for a value j chosen from a set of positive integers {1,2, ...,n }. 
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